For Students - ISIS

Huawei Routing &
Switching– IS-IS
www.huawei.com
HUAWEI TECHNOLOGIES CO., LTD.

Foreword
I. IS-IS is short for Intermediate System to Intermediate System.

II. IS-IS is a link state protocol based on the shortest path first (SPF)
algorithm. It is also an Interior Gateway Protocol (IGP).
III. IS-IS is mainly used in large networks.
HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 2

Principles Commands Troubleshooting Cases Suggestions
Contents
IS-IS Principles
IS-IS Configuration Commands
IS-IS Troubleshooting
IS-IS Case Analysis
IS-IS Exam Preparation

IS-IS Principles
IS-IS Principles
 Basic IS-IS Concepts
 Basic IS-IS Principles
 Basic IS-IS Characteristics
 IS-IS Convergence

Application
CE
CE
PE
ER ER
OSPF
IS-IS+BGP PE
CS CS
PE PE
PE
CE
CE
SW SW SW
 Campus network:  Backbone network:

A variety of areas, changeable policies, Flat area, fast convergence, and
and fine-grained scheduling high transmission volume
Copyright © 2017 Huawei Technologies Co., Ltd. All rights reserved. Page 5
Origin
OSI
Application
layer
Presentation TCP/IP
layer
Session Application
layer layer
Transport Transport
TP0-TP4 OSPF TCP
layer layer
Network Network
CLNP IS-IS IP
layer layer
Data link Data link
ES-IS ARP
layer layer
Physical Integrated Physical
layer IS-IS layer
 Integrated IS-IS characteristics:  OSPF characteristics:

 Supports CLNP and IP networks.  Supports only IP networks.
 Works at the data link layer.  Works at the IP layer.
Comparison Between OSPF and IS-IS

– Basic Features
Similarities
 They are both IGPs and are widely applied.
 They both support the IP network.
 They both adopt the hierarchical and area-based design.
Differences
 OSPF supports only IP. IS-IS supports IP and connectionless network
protocol (CLNP).
 OSPF supports various network types. IS-IS supports only two network types.
 OSPF supports virtual links. IS-IS provides the similar function, but devices of
a few vendors support this function.
 OSPF works at the network layer. IS-IS works at the data link layer.
 OSPF divides areas based on interfaces. IS-IS divides areas based on links.


– Neighbor Relationship
Similarities
 They both use Hello packets to establish and maintain neighbor relationships.
 The DR/DIS is elected on a non-broadcast multiple access (NBMA) network.
Differences
 OSPF has stricter requirements for establishing neighbor relationships. IS-IS
has relatively loose requirements for establishing neighbor relationships.
 OSPF has higher reliability in establishing neighbor relationships on P2P links.
Comparatively, IS-IS has lower reliability.
 OSPF neighbor relationships no level. The IS-IS neighbor relationship has two
levels.
 OSPF processes the DR/BDR in a different way from the way in which IS-IS
processes the DIS.


– Database Synchronization
Similarities
 They both require the unified LSDB.
Differences
 OSPF LSAs have various types. IS-IS LSPs have a few types.
 OSPF and IS-IS support different database synchronization processes.
 The time to live (TTL) value of an OSPF LSA starts from 0. The TTL
value of an IS-IS LSP decreases from the maximum value.


– Other Features
Similarities
 They both adopt the SPF algorithm to calculate routes.
 They both support features for loop free, fast convergence, and large
network deployment.
Differences
 OSPF cost types are simple. IS-IS cost types are complex.
 OSPF supports on-demand dialing. IS-IS does not support this function.

Differences Between IS-IS and OSPF
Item IS-IS OSPF
Network types Less More
Complicate
Cost style Simple
d
Use IS-IS or OSPF
Area types Less More
based on your
Packet types Simple Various service
requirements
Route
Faster Fast
convergence
Scalability High Medium
Routing load
Higher High
capacity
Terms
Abbreviation OSI Term IETF Term
IS Intermediate System Router
ES End System Host
Designated Intermediate Designated Router in
DIS
System OSPF
SysID System ID Router ID in OSPF
LSP Link State PDU LSA in OSPF
IIH IS-IS Hello PDU Hello packet in OSPF
Partial Sequence Number
PSNP LSR or LSAck in OSPF
PDU
Complete Sequence Number
CSNP DD packet in OSPF
PDU
Basic IS-IS Concepts – IS-IS History
OSI IS-IS Characteristics:

Application  Applies to only connectionless network
Presentation
service (CLNS) environments.
Session
Integrated IS-IS Characteristics:
CLNS
Transport CLNP  Applies to Connectionless Network
ES-IS
Network IS-IS Protocol (CLNP) networks, IP networks,
.
.
and CLNP- and IP-enabled networks.
DataLink
.  Works at the data link layer.
Physical

Basic IS-IS Concepts – Overall IS-IS Topology
Area 47.0002 Area 47.0004
L1
L1/2 L1/2
L2
L2
Area 47.0001 Backbone
L2 L2
Area 47.0005
L1
L1/2 L1/2 L1
L1
Area 47.0003 L1 L1

Basic IS-IS Concepts – IS-IS Router Classification

L1 neighbor L1 neighbor R4 L1/2
Area 47.0002
R1 L1 R2 L1 R3 L1/2
Maintaining L1 LSDB
L2 neighbor
Area 47.0001
L2 neighbor L2 neighbor
R5 L1/2 Area 47.0002

R1L1/2 R2 L2 R3 L2
Maintaining L2 LSDB
L2 neighbor Area 47.0001
L1/2 neighbor
Area 47.0001 L1 neighbor
R4 L1/2
R3 L2
R2 L1 R1 L1/2 L2 neighbor
Maintaining L1/2 LSDB
R6 L2
L2 neighbor
Area 47.0003

Basic IS-IS Concepts – IS-IS Network Types

IS-IS supports the following network types
 Point-to-point (P2P) networks, such as PPP and HDLC networks
 Broadcast networks, such as Ethernet
Broadcast links: DIS and pseudonode
 DIS: designated intermediate system
 Function: provides more efficient database synchronization on a broadcast network
L1 L1/2 L1 L1/2
Virtual router
L1 DIS L1 L1 L1

Basic IS-IS Concepts – IS-IS Address Structure

A network service access point (NSAP) is an address defined by the OSI to
locate resources.
 It is equivalent to the address of CLNP, which is a network layer protocol in
the OSI. (It is similar to the IP address.)
A network entity title (NET) can be regarded as a special NSAP (SEL is 00).
 When configuring IS-IS on a router, you only need to consider an NET.
IDP DSP
AFI IDI High Order DSP System ID SEL

Area ID (1-13B) 6B 1B

Basic IS-IS Concepts – IS-IS PDU Types

Hello PDUs (IIHs) are used to establish and maintain neighbor relationships.
 Level-1 LAN IIH
 Level-2 LAN IIH
 P2P IIH
LSPs are used to exchange link state information.
 Level-1 LSP
 Level-2 LSP
SNPs are used to maintain LSDB integrity and synchronization. An SNP contains
summary information of the LSDB.
 CSNP
• Level-1 CSNP
• Level-2 CSNP
 PSNP
• Level-1 PSNP
• Level-2 PSNP

Basic IS-IS Principles – Conditions for

Establishing an IS-IS Neighbor Relationship
Conditions for establishing an IS-IS neighbor relationship are as follows:
 Same level
 Same area
 Same network segment
 Same network type

Basic IS-IS Principles – IS-IS Neighbor

Relationship Establishment on a Broadcast Link
R1 R2
SYS ID 0000.0000.0001 SYS ID 0000.0000.0002
L2 LAN IIH(SYS ID: 0000.0000.0001 neighbor: null)

Status: initialized
L2 LAN IIH(SYS ID: 0000.0000.0002 neighbor: R1)

Status: up
L2 LAN IIH(SYS ID: 0000.0000.0001 neighbor: R2)

Status: up
L2 LAN IIH
L2 LAN IIH

Basic IS-IS Principles – IS-IS Neighbor

Relationship Establishment on a P2P Network
R1 R2
SYS ID 0000.0000.0001 SYS ID 0000.0000.0002
L12 P2P IIH Status: up
L12 P2P IIH

Status: up

Basic IS-IS Principles – Process of

Exchanging LSPs on a Broadcast Network
R1
R3
R2 DIS
CSNP LSP
R1.00-00 R3.00-00
R2.00-00
R2.01-00
R3.00-00
PSNP
Route and IP address R1.00-00
prefix of the neighbor LSP R2.00-00
connected to the router R1.00-00 R2.01-00
R2.00-00
List all known routers
and the metric is 0
R2.01-00

Basic IS-IS Principles – Process of

Exchanging LSPs on a P2P Network
R1 R2
CSNP
R1.00-00
PSNP
R1.00-00
LSP
R1.00-00
PSNP
Retransmission times out  R1.00-00
LSP
R1.00-00 Resend a PSNP
PSNP
R1.00-00

Basic IS-IS Characteristics – IS-IS Route Leaking

IS-IS Route Leaking
 Level-1-2 routers leak Level 2 routes to Level 1 areas, preventing Level 1
routers from selecting sub-optimal routes.
Area 47.0001
R1 R3
L1 L1/2
cost 50 Area 47.0002
10.0.0.0/24
cost 10 cost 10
cost 10 10.0.1.0/24
cost 10 R5 R6
cost 10 L2 L2
R2 R4
L1 L1/2

Basic IS-IS Characteristics – IS-IS Overload

IS-IS Overload
 The IS-IS overload bit identifies the overload state.
 After the overload bit is set on a router, other routers ignore this router
when performing SPF calculation and calculate only the direct routes of
the router.
R4 R5
R1 R3
R2

IS-IS Convergence
Fast Convergence
 Incremental SPF (I-SPF)
• Calculates only routes of the changed nodes
• Calculates all nodes only for the first time
 Partial route calculation (PRC)
• Calculates only the changed routes when the network topology changes
• Updates routes based on the SPT calculated by I-SPF
 Intelligent timer
• Classified into SPF calculation intelligent timer and LSP generation intelligent timer
• The intelligent timer interval automatically increases when the network changes
frequently.
 LSP fast flooding
Priority-based Convergence
 A technology that ensures the preferential convergence of specified routes.

IS-IS Extended Features – IS-IS Authentication

Authentication Types
 Interface authentication
• Authenticates only Level-1 and Level-2 Hello packets
 Area authentication
• Authenticates Level-1 SNPs and LSPs
 Routing domain authentication
• Authenticates Level-2 SNPs and LSPs
Authentication Modes
 Null
 Plain text
 MD5

IS-IS Principles
 Configuring Basic IS-IS Functions
 Configuring IS-IS DIS Election in Different Types of Networks
 Controlling the Advertising of IS-IS Routes
 Controlling the Receiving of IS-IS Routes
 Improving IS-IS Security

Configuring Basic IS-IS Functions (1)
Assume that you are the network administrator of Company A. The following
figure shows the network topology of Company A. Company A requires that:
 Configure R1, R2, and R3 as Level-1 routers, and configure R6 as a Level-2 router.
Set the system ID to 0000.0000.000X and IS-IS process ID to 1.
 Advertise network segments of interfaces to the IS-IS area. Do not advertise
network segment 10.0.X.0/24.
Area 47.0001
R1 R4
.1 Area 47.0002
192.168.1.0/24
R3 R6 10.0.0.0/24
10.0.1.0/24
.3 10.0.2.0/24
10.0.3.0/24
R2 R5
.2

Configuring Basic IS-IS Functions (2)

isis 1
network-entity 47.0001.0000.0000.0004.00
isis 1 #
is-level level-1 interface GigabitEthernet0/0/1
network-entity 47.0001.0000.0000.0001.00 isis enable 1
# #
interface GigabitEthernet0/0/0 interface Serial0/0/1
isis enable 1 isis enable 1
R1 R4
G0/0/0
S0/0/1 Area 47.0002
G0/0/1
R3 R6
G0/0/1 10.0.0.0/24
10.0.1.0/24
10.0.2.0/24
G0/0/2
10.0.3.0/24
R2 R5
Area 47.0001 isis 1

is-level level-2
network-entity 47.0002.0000.0000.0006.00 #
interface GigabitEthernet0/0/1
isis enable 1
[R5]display isis peer #
System Id Interface Circuit Id State HoldTime Type PRI interface GigabitEthernet0/0/2
------------------------------------------------------------------------------- isis enable 1
0000.0000.0002 S0/0/2 0000000002 Up 25s L1 --
0000.0002.0006 GE0/0/2 0000.0000.0005.01 Up 30s L2 64

Configuring IS-IS DIS Election in Different

Types of Networks (1)
Company A decides to reconstruct the network based on original network configuration.
The requirements are as follows:
 Ensure that no DIS is elected between R4 and R6 or between R5 and R6.
 Ensure that R1, R2, and R3 are in the same network and elect R3 as the DIS. Configure
priorities that are as small as possible for R1 and R2 to participate in the DIS election.
Area 47.0001
R1 R4
.1 Area 47.0002
192.168.1.0/24
R3 R6
10.0.0.0/24
10.0.1.0/24
.3
10.0.2.0/24
10.0.3.0/24
R2 R5
.2
[R6]display isis interface
Interface Id IPV4.State IPV6.State MTU Type DIS
GE0/0/1 001 Up Down 1497 L1/L2 No/Yes
GE0/0/2 002 Up Down 1497 L1/L2 No/No

Configuring IS-IS DIS Election in Different

Types of Networks (2)
interface GigabitEthernet0/0/1 interface GigabitEthernet0/0/1
isis circuit-type p2p isis circuit-type p2p
isis dis-priority 0
#
isis circuit-type p2p
R1 R4
G0/0/0
Area 47.0002
R3 G0/0/1 R6 10.0.0.0/24
G0/0/1 10.0.1.0/24
10.0.2.0/24
G0/0/2
10.0.3.0/24
R2 R5
G0/0/0
G0/0/2
Area 47.0001 isis circuit-type p2p
interface GigabitEthernet0/0/0 interface GigabitEthernet0/0/2

isis dis-priority 0 isis circuit-type p2p
[R3]display isis interface [R5]display isis interface

Interface Id IPV4.State IPV6.State MTU Type DIS Interface Id IPV4.State IPV6.State MTU Type DIS
S0/0/1 001 Up Down 1500 L1/L2 -- S0/0/2 001 Up Down 1500 L1/L2 --
S0/0/2 002 Up Down 1500 L1/L2 -- GE0/0/2 002 Up Down 1497 L1/L2 --
GE0/0/0 001 Up Down 1497 L1/L2 Yes/No

Controlling the Advertising of IS-IS Routes (1)

Company A requires that different areas can communicate with each other. The
requirements are as follows:
 Enable R6 to import network segment 10.0.X.0/24 and add tag 100 to imported
routes.
 Enable area 47.0001 to learn routes on network segment 10.0.X.0/24 through R4.
Ensure that the tag of the routes is 100.
Area 47.0001
R1 R4
.1 Area 47.0002
192.168.1.0/24
R3 R6 10.0.0.0/24
10.0.1.0/24
.3 10.0.2.0/24
10.0.3.0/24
R2 R5
.2

Controlling the Advertising of IS-IS Routes (2)

isis 1
cost-style wide
network-entity 47.0001.0000.0000.0004.00
import-route isis level-2 into level-1 filter-policy route-policy TAG isis 1
# is-level level-2
route-policy TAG permit node 10 cost-style wide
if-match tag 100 network-entity 47.0002.0000.0000.0006.00
import-route direct tag 100
R1
Area 47.0002
R3 R4 10.0.0.0/24
10.0.1.0/24
10.0.2.0/24
R6 10.0.3.0/24
R2 R5
[R6]display isis route

Area 47.0001 Route information for ISIS(1)
-----------------------------
ISIS(1) Level-2 Redistribute Table
[R1]display ip routing-table ----------------------------------
Destination/Mask Proto Pre Cost Flags NextHop Interface Type IPV4 Destination IntCost ExtCost Tag
0.0.0.0/0 ISIS-L1 15 20 D 192.168.1.3 GigabitEthernet0/0/0 --------------------------------------------------------------------------
10.0.0.0/24 ISIS-L1 15 30 D 192.168.1.3 GigabitEthernet0/0/0 D 10.0.0.0/24 0 NULL 100

Controlling the Receiving of IS-IS Routes (1)
Company A has the following new requirements:

 Allow R2 to access the network in area 47.0002 only through a default route. Do
not use ACLs or IP prefix lists.
Area 47.0001
R1 R4
.1 Area 47.0002
192.168.1.0/24
R3 R6 10.0.0.0/24
10.0.1.0/24
.3 10.0.2.0/24
10.0.3.0/24
R2 R5
.2
[R2]display ip routing-table
Destination/Mask Proto Pre Cost Flags NextHop Interface
0.0.0.0/0 ISIS-L1 15 20 D 192.168.1.3 GigabitEthernet0/0/0

Controlling the Receiving of IS-IS Routes (2)
Area 47.0001
R1
Area 47.0002
R3 R4
10.0.0.0/24
10.0.1.0/24
R6 10.0.2.0/24
10.0.3.0/24
R2 R5
isis 1 [R2]display ip routing-table

is-level level-1 Destination/Mask Proto Pre Cost Flags NextHop Interface
cost-style wide 0.0.0.0/0 ISIS-L1 15 20 D 192.168.1.3 GigabitEthernet0/0/0
network-entity 47.0001.0000.0000.0002.00
filter-policy route-policy 10 import [R2]display isis lsdb verbose | inc 10.0.
# Level-1 Link State Database
route-policy 10 deny node 10 LSPID Seq Num Checksum Holdtime Length ATT/P/OL
if-match tag 100 -------------------------------------------------------------------------------
# +IP-Extended* 10.0.0.0 255.255.255.0 COST: 10 Tag: 100
route-policy 10 permit node 20 +IP-Extended* 10.0.3.0 255.255.255.0 COST: 10 Tag: 100
+IP-Extended* 10.0.2.0 255.255.255.0 COST: 10 Tag: 100
+IP-Extended* 10.0.1.0 255.255.255.0 COST: 10 Tag: 100

Improving IS-IS Security (1)

Company A wants to improve the security of its network and has the following
requirements:
 Authenticate LSPs and SNPs sent by routers in area 47.0001. Set the
authentication type to MD5 and authentication password to Huawei.
 Authenticate IIHs sent by Level-2 routers. Set the authentication type to MD5 and
authentication password to Huawei.
Area 47.0001
R1 R4
.1 Area 47.0002
192.168.1.0/24
R3 R6 10.0.0.0/24
10.0.1.0/24
.3 10.0.2.0/24
10.0.3.0/24
R2 R5
.2

Improving IS-IS Security (2)

isis 1 isis 1
area-authentication-mode md5 Huawei ip area-authentication-mode md5 Huawei ip
#
isis authentication-mode md5 Huawei ip
Area 47.0001
R1
Area 47.0002
R3 R4 G0/0/1
G0/0/1
10.0.0.0/24
10.0.1.0/24
G0/0/2
R6 10.0.2.0/24
10.0.3.0/24
R2 R5
isis 1
isis authentication-mode md5 Huawei ip
#
[R4]display isis error | include Authentication isis authentication-mode md5 Huawei ip
Statistics of error packets for ISIS(1)
---------------------------------------
LSP packet errors:
Bad Authentication :0 Bad Auth Count :0
Hello packet errors:
Mismatched Max Area Addr: 0 Bad Authentication :0

For Students - ISIS

Uploaded by

Copyright:

Available Formats

You might also like

For Students - ISIS

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

For Students - ISIS

Uploaded by

Copyright:

Available Formats

Huawei Routing &

HUAWEI TECHNOLOGIES CO., LTD.

I. IS-IS is short for Intermediate System to Intermediate System.

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 2

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 3

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 4

 Campus network:  Backbone network:

 Integrated IS-IS characteristics:  OSPF characteristics:

 Works at the data link layer.  Works at the IP layer.

Comparison Between OSPF and IS-IS

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 7

Comparison Between OSPF and IS-IS

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 8

Comparison Between OSPF and IS-IS

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 10

Comparison Between OSPF and IS-IS

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 11

Scalability High Medium

Basic IS-IS Concepts – IS-IS History

OSI IS-IS Characteristics:

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 14

Basic IS-IS Concepts – Overall IS-IS Topology

Area 47.0002 Area 47.0004

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 15

Basic IS-IS Concepts – IS-IS Router Classification

R5 L1/2 Area 47.0002

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 16

Basic IS-IS Concepts – IS-IS Network Types

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 17

Basic IS-IS Concepts – IS-IS Address Structure

AFI IDI High Order DSP System ID SEL

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 18

Basic IS-IS Concepts – IS-IS PDU Types

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 19

Basic IS-IS Principles – Conditions for

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 20

Basic IS-IS Principles – IS-IS Neighbor

SYS ID 0000.0000.0001 SYS ID 0000.0000.0002

L2 LAN IIH(SYS ID: 0000.0000.0001 neighbor: null)

L2 LAN IIH(SYS ID: 0000.0000.0002 neighbor: R1)

L2 LAN IIH(SYS ID: 0000.0000.0001 neighbor: R2)

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 21

Basic IS-IS Principles – IS-IS Neighbor

SYS ID 0000.0000.0001 SYS ID 0000.0000.0002

L12 P2P IIH Status: up

L12 P2P IIH

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 22

Basic IS-IS Principles – Process of

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 23

Basic IS-IS Principles – Process of

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 24

Basic IS-IS Characteristics – IS-IS Route Leaking

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 25

Basic IS-IS Characteristics – IS-IS Overload

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 26

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 27

IS-IS Extended Features – IS-IS Authentication

HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential 28

IS-IS Configuration Commands